Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
File:                     gz8MJRPUNTtAzvg5F57r-HOCRcY.mft (raw, json)
Hash identifier:          MRpo8G4qzBEvOCfy/7Bzr6huk4PyJ0JsCzURpEkml2Y=
Subject key identifier:   53:49:F4:DD:A3:5B:A6:4D:62:11:2A:54:7F:D6:42:70:D5:88:36:D2
Authority key identifier: 83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6
Certificate issuer:       /CN=833f0c2513d4353b40cef839179eebf8738245c6
Certificate serial:       0190448CB9769FA08265119D2EF273505604
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
Manifest number:          0CAE
Signing time:             Sun 23 Jun 2024 10:03:11 +0000
Manifest this update:     Sun 23 Jun 2024 10:03:11 +0000
Manifest next update:     Mon 24 Jun 2024 10:03:11 +0000
Files and hashes:         1: gz8MJRPUNTtAzvg5F57r-HOCRcY.crl (hash: 7sruX7zqIU3tWsB23B9LbjVzRRqBoa9LsxEZH7Tvt1U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8c:b9:76:9f:a0:82:65:11:9d:2e:f2:73:50:56:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=833f0c2513d4353b40cef839179eebf8738245c6
        Validity
            Not Before: Jun 23 10:03:11 2024 GMT
            Not After : Jun 24 10:03:11 2024 GMT
        Subject: CN=5349f4dda35ba64d62112a547fd64270d58836d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:90:42:ff:da:46:e6:fa:0d:53:f6:5f:7a:15:
                    cc:e1:8c:ad:e2:1c:dd:91:9a:7d:41:89:fe:bd:1f:
                    e7:26:a1:ea:56:e8:5f:1d:e5:4a:9b:1d:99:ce:ec:
                    fe:68:99:4b:df:03:1d:42:8d:81:fc:46:b4:06:1d:
                    65:a9:75:0d:2e:e9:55:d1:0b:5b:16:84:6d:ae:9f:
                    be:b0:7e:46:b5:65:4b:e6:fa:3d:78:ed:ce:2a:25:
                    88:58:6e:41:9a:f8:04:a1:14:38:08:81:00:bc:61:
                    9c:25:ce:ec:14:fd:26:6c:4e:60:9c:3b:5a:cd:4f:
                    a5:37:88:c7:36:b8:79:bd:75:21:7a:f5:ea:0e:12:
                    6d:f1:60:1c:0c:6d:fb:d7:66:ca:bf:80:10:51:83:
                    9a:0b:9b:66:85:21:e3:15:64:f2:37:5a:ae:09:7d:
                    f8:0f:c2:08:61:d5:33:3c:77:3d:b7:a5:df:74:63:
                    7e:ce:41:0a:8e:5d:90:20:5a:5f:cb:79:69:4b:d1:
                    02:a1:c8:d4:8c:0d:6f:5a:7a:b6:db:0b:b8:95:ea:
                    b7:51:85:39:74:f4:4d:bd:8e:20:48:4a:e0:f1:c7:
                    8d:51:c9:89:47:b8:23:eb:c8:08:b3:b5:26:c0:6e:
                    11:30:4b:09:27:8f:c5:7c:95:8e:c8:c8:e5:01:dc:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:49:F4:DD:A3:5B:A6:4D:62:11:2A:54:7F:D6:42:70:D5:88:36:D2
            X509v3 Authority Key Identifier:
                keyid:83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:26:4e:b4:65:91:8d:f4:03:c2:68:29:3c:5b:58:38:7d:64:
         b6:5d:9e:20:25:2a:7a:3c:73:a1:cd:bd:ff:11:16:1f:d7:97:
         1c:1d:03:ab:69:c3:d3:ba:38:1f:3d:7d:4d:6a:20:b9:c1:7e:
         53:69:98:7a:01:50:8c:32:da:00:57:e1:51:9e:f3:9f:6b:23:
         cd:3a:c6:a7:e5:12:a5:56:95:45:66:30:a6:89:85:75:89:14:
         69:ec:7f:e0:ad:49:59:7c:c1:05:4c:97:0a:be:ba:29:27:43:
         bf:b4:70:82:97:5f:c0:26:e7:5f:77:35:41:58:39:d9:0f:cb:
         5e:d9:e1:e5:76:ef:ca:3d:04:bb:59:ec:eb:47:cd:b9:91:a7:
         ba:c2:c4:91:c1:14:0e:ab:ec:4c:4e:66:d1:a3:21:a0:13:eb:
         6f:40:f8:8f:d4:b6:46:82:2c:eb:71:bd:f6:a9:35:ce:40:7c:
         07:82:d3:d7:d0:14:81:9f:5d:f8:44:4c:2c:8a:bc:5c:a8:40:
         12:a4:1c:e3:43:8f:17:81:f1:fd:8e:e0:58:75:a1:cf:34:e1:
         f5:4b:e6:30:b8:ef:9a:15:2d:a0:d1:20:76:3a:03:dc:a8:f1:
         3a:15:b5:8c:be:20:80:46:10:d3:1b:4e:6f:bf:3c:9c:d7:d5:
         dc:d1:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:02:56 2024 by rpki-client on console-fra.rpki-client.org